14,088 research outputs found

    The Viability and Potential Consequences of IoT-Based Ransomware

    Get PDF
    With the increased threat of ransomware and the substantial growth of the Internet of Things (IoT) market, there is significant motivation for attackers to carry out IoT-based ransomware campaigns. In this thesis, the viability of such malware is tested. As part of this work, various techniques that could be used by ransomware developers to attack commercial IoT devices were explored. First, methods that attackers could use to communicate with the victim were examined, such that a ransom note was able to be reliably sent to a victim. Next, the viability of using "bricking" as a method of ransom was evaluated, such that devices could be remotely disabled unless the victim makes a payment to the attacker. Research was then performed to ascertain whether it was possible to remotely gain persistence on IoT devices, which would improve the efficacy of existing ransomware methods, and provide opportunities for more advanced ransomware to be created. Finally, after successfully identifying a number of persistence techniques, the viability of privacy-invasion based ransomware was analysed. For each assessed technique, proofs of concept were developed. A range of devices -- with various intended purposes, such as routers, cameras and phones -- were used to test the viability of these proofs of concept. To test communication hijacking, devices' "channels of communication" -- such as web services and embedded screens -- were identified, then hijacked to display custom ransom notes. During the analysis of bricking-based ransomware, a working proof of concept was created, which was then able to remotely brick five IoT devices. After analysing the storage design of an assortment of IoT devices, six different persistence techniques were identified, which were then successfully tested on four devices, such that malicious filesystem modifications would be retained after the device was rebooted. When researching privacy-invasion based ransomware, several methods were created to extract information from data sources that can be commonly found on IoT devices, such as nearby WiFi signals, images from cameras, or audio from microphones. These were successfully implemented in a test environment such that ransomable data could be extracted, processed, and stored for later use to blackmail the victim. Overall, IoT-based ransomware has not only been shown to be viable but also highly damaging to both IoT devices and their users. While the use of IoT-ransomware is still very uncommon "in the wild", the techniques demonstrated within this work highlight an urgent need to improve the security of IoT devices to avoid the risk of IoT-based ransomware causing havoc in our society. Finally, during the development of these proofs of concept, a number of potential countermeasures were identified, which can be used to limit the effectiveness of the attacking techniques discovered in this PhD research

    Minimum income support systems as elements of crisis resilience in Europe: Final Report

    Full text link
    Mindestsicherungssysteme dienen in den meisten entwickelten Wohlfahrtsstaaten als Sicherheitsnetz letzter Instanz. Dementsprechend spielen sie gerade in wirtschaftlichen Krisenzeiten eine besondere Rolle. Inwieweit Mindestsicherungssysteme in Zeiten der Krise beansprucht werden, hängt auch von der Ausprägung vorgelagerter Sozialschutzsysteme ab. Diese Studie untersucht die Bedeutung von Systemen der Mindestsicherung sowie vorgelagerter Systeme wie Arbeitslosenversicherung, Kurzarbeit und arbeitsrechtlichem Bestandsschutz für die Krisenfestigkeit in Europa. Im Kontext der Finanzkrise von 2008/2009 und der Corona-Krise wird die Fähigkeit sozialpolitischer Maßnahmen untersucht, Armut und Einkommens­verluste einzudämmen und gesellschaftliche Ausgrenzung zu vermeiden. Die Studie setzt dabei auf quantitative und qualitative Methoden, etwa multivariate Analysen, Mikrosimulationsmethoden sowie eingehende Fallstudien der Länder Dänemark, Frankreich, Irland, Polen und Spanien, die für unterschiedliche Typen von Wohlfahrtsstaaten stehen.The aim of this study is to analyse the role of social policies in different European welfare states regarding minimum income protection and active inclusion. The core focus lies on crisis resilience, i.e. the capacity of social policy arrangements to contain poverty and inequality and avoid exclusion before, during and after periods of economic shocks. To achieve this goal, the study expands its analytical focus to include other tiers of social protection, in particular upstream systems such as unemployment insurance, job retention and employment protection, as they play an additional and potentially prominent role in providing income and job protection in situations of crisis. A mixed-method approach is used that combines quantitative and qualitative research, such as descriptive and multivariate quantitative analyses, microsimulation methods and in-depth case studies. The study finds consistent differences in terms of crisis resilience across countries and welfare state types. In general, Nordic and Continental European welfare states with strong upstream systems and minimum income support (MIS) show better outcomes in core socio-economic outcomes such as poverty and exclusion risks. However, labour market integration shows some dualisms in Continental Europe. The study shows that MIS holds particular importance if there are gaps in upstream systems or cases of severe and lasting crises

    Identifizierung prädiktiver und prognostischer Biomarker in unterschiedlichen Tumorkompartimenten des ösophagealen Adenokarzinoms

    Get PDF
    Das ösophageale Adenokarzinom zeigt eine global steigende Inzidenz und hat mit einer 5-Jahres-Überlebensrate von weniger als 25% eine schlechte Prognose. Personalisierte Therapieansätze sind selten und prognostische/prädiktive Biomarker des Tumormikromilieus sind unzureichend charakterisiert. Die kumulative Promotion nähert sich dieser Problematik in drei unterschiedlichen Schwerpunkten. 1. Zur Identifizierung Kompartiment-spezifischer Biomarker wurde eine Methode entwickelt, welche als kostengünstige Alternative zum sc-Seq Expressionsprofile individueller Zelltypen generiert. Dabei erfolgt die Extraktion der RNA nicht aus Einzelzellen, sondern aus flowzytometrisch-getrennten Zellkompartimenten. Die Separation der Proben in Epithelzellen, Immunzellen und Fibroblasten wurde durch verschiedene Verfahren validiert und eine suffiziente Ausbeute an RNA auch für kleine Gewebemengen gezeigt. 2. Biomarker des Immunzellkompartiments als therapeutische Angriffspunkte wurden in einem Patientenkollektiv von bis zu 551 Patienten auf ihre Bedeutung beim EAC überprüft. Es zeigte sich eine Expression der Immuncheckpoints LAG3, VISTA und IDO auf TILs durch IHC und RNA-Sonden basierte Verfahren in einem relevanten Anteil (LAG3: 11,4%, VISTA: 29%, IDO: 52,6%). Es konnte eine prognostisch günstige Bedeutung der VISTA, LAG3 und IDO Expression gezeigt werden. Durch den Vergleich von Genexpressionsprofilen aus therapienaiven und vorbehandelten Tumoren konnte zudem ein immunsuppressiver Effekt von neoadjuvanten Therapiekonzepten auf das Tumormikromilieu des EACs gezeigt werden. Dabei kam es zur verminderten Expression von Checkpoints und Anzahl TILs nach (Radio-) Chemotherapie. 3. Im Tumorzellkompartiment wurde die Rolle von Amplifikationen in ErbB-Rezeptor abhängigen Signalwegen durch FISH-Technik und Immunhistochemie evaluiert. Es fanden sich KRAS Amplifikationen in 17,1%, PIK3CA Amplifikationen in 5% sowie eine HER2/neu-Überexpression in 14,9% der untersuchten Tumore

    A Decision Support System for Economic Viability and Environmental Impact Assessment of Vertical Farms

    Get PDF
    Vertical farming (VF) is the practice of growing crops or animals using the vertical dimension via multi-tier racks or vertically inclined surfaces. In this thesis, I focus on the emerging industry of plant-specific VF. Vertical plant farming (VPF) is a promising and relatively novel practice that can be conducted in buildings with environmental control and artificial lighting. However, the nascent sector has experienced challenges in economic viability, standardisation, and environmental sustainability. Practitioners and academics call for a comprehensive financial analysis of VPF, but efforts are stifled by a lack of valid and available data. A review of economic estimation and horticultural software identifies a need for a decision support system (DSS) that facilitates risk-empowered business planning for vertical farmers. This thesis proposes an open-source DSS framework to evaluate business sustainability through financial risk and environmental impact assessments. Data from the literature, alongside lessons learned from industry practitioners, would be centralised in the proposed DSS using imprecise data techniques. These techniques have been applied in engineering but are seldom used in financial forecasting. This could benefit complex sectors which only have scarce data to predict business viability. To begin the execution of the DSS framework, VPF practitioners were interviewed using a mixed-methods approach. Learnings from over 19 shuttered and operational VPF projects provide insights into the barriers inhibiting scalability and identifying risks to form a risk taxonomy. Labour was the most commonly reported top challenge. Therefore, research was conducted to explore lean principles to improve productivity. A probabilistic model representing a spectrum of variables and their associated uncertainty was built according to the DSS framework to evaluate the financial risk for VF projects. This enabled flexible computation without precise production or financial data to improve economic estimation accuracy. The model assessed two VPF cases (one in the UK and another in Japan), demonstrating the first risk and uncertainty quantification of VPF business models in the literature. The results highlighted measures to improve economic viability and the viability of the UK and Japan case. The environmental impact assessment model was developed, allowing VPF operators to evaluate their carbon footprint compared to traditional agriculture using life-cycle assessment. I explore strategies for net-zero carbon production through sensitivity analysis. Renewable energies, especially solar, geothermal, and tidal power, show promise for reducing the carbon emissions of indoor VPF. Results show that renewably-powered VPF can reduce carbon emissions compared to field-based agriculture when considering the land-use change. The drivers for DSS adoption have been researched, showing a pathway of compliance and design thinking to overcome the ‘problem of implementation’ and enable commercialisation. Further work is suggested to standardise VF equipment, collect benchmarking data, and characterise risks. This work will reduce risk and uncertainty and accelerate the sector’s emergence

    3D Computer Graphics and Virtual Reality

    Get PDF
    This chapter is dedicated to the description of 3D computer graphics used for the needs of virtual reality. Virtual reality (VR) is the use of computer technology to create a 3D virtual environment. The chapter presents some graphical features used in an environment as well as an explanation of good design practice. The chapter contains also the description of lighting settings, 3D objects/models and virtualization sequence, camera, and scenes where the wheelchair simulator is used as an example of the implementation environment

    TOWARDS AN UNDERSTANDING OF EFFORTFUL FUNDRAISING EXPERIENCES: USING INTERPRETATIVE PHENOMENOLOGICAL ANALYSIS IN FUNDRAISING RESEARCH

    Get PDF
    Physical-activity oriented community fundraising has experienced an exponential growth in popularity over the past 15 years. The aim of this study was to explore the value of effortful fundraising experiences, from the point of view of participants, and explore the impact that these experiences have on people’s lives. This study used an IPA approach to interview 23 individuals, recognising the role of participants as proxy (nonprofessional) fundraisers for charitable organisations, and the unique organisation donor dynamic that this creates. It also bought together relevant psychological theory related to physical activity fundraising experiences (through a narrative literature review) and used primary interview data to substantiate these. Effortful fundraising experiences are examined in detail to understand their significance to participants, and how such experiences influence their connection with a charity or cause. This was done with an idiographic focus at first, before examining convergences and divergences across the sample. This study found that effortful fundraising experiences can have a profound positive impact upon community fundraisers in both the short and the long term. Additionally, it found that these experiences can be opportunities for charitable organisations to create lasting meaningful relationships with participants, and foster mutually beneficial lifetime relationships with them. Further research is needed to test specific psychological theory in this context, including self-esteem theory, self determination theory, and the martyrdom effect (among others)

    Defining Service Level Agreements in Serverless Computing

    Get PDF
    The emergence of serverless computing has brought significant advancements to the delivery of computing resources to cloud users. With the abstraction of infrastructure, ecosystem, and execution environments, users could focus on their code while relying on the cloud provider to manage the abstracted layers. In addition, desirable features such as autoscaling and high availability became a provider’s responsibility and can be adopted by the user\u27s application at no extra overhead. Despite such advancements, significant challenges must be overcome as applications transition from monolithic stand-alone deployments to the ephemeral and stateless microservice model of serverless computing. These challenges pertain to the uniqueness of the conceptual and implementation models of serverless computing. One of the notable challenges is the complexity of defining Service Level Agreements (SLA) for serverless functions. As the serverless model shifts the administration of resources, ecosystem, and execution layers to the provider, users become mere consumers of the provider’s abstracted platform with no insight into its performance. Suboptimal conditions of the abstracted layers are not visible to the end-user who has no means to assess their performance. Thus, SLA in serverless computing must take into consideration the unique abstraction of its model. This work investigates the Service Level Agreement (SLA) modeling of serverless functions\u27 and serverless chains’ executions. We highlight how serverless SLA fundamentally differs from earlier cloud delivery models. We then propose an approach to define SLA for serverless functions by utilizing resource utilization fingerprints for functions\u27 executions and a method to assess if executions adhere to that SLA. We evaluate the approach’s accuracy in detecting SLA violations for a broad range of serverless application categories. Our validation results illustrate a high accuracy in detecting SLA violations resulting from resource contentions and provider’s ecosystem degradations. We conclude by presenting the empirical validation of our proposed approach, which could detect Execution-SLA violations with accuracy up to 99%

    Desarrollo de una herramienta integral de gestión de gases de efecto invernadero para la toma de decisión contra el cambio climático a nivel regional y local en la Comunitat Valenciana

    Full text link
    Tesis por compendio[ES] Actualmente, los responsables de tomar decisiones contra el cambio climático carecen de herramientas para desarrollar inventarios de emisiones de gases de efecto invernadero (GEI) con suficiente rigor científico-técnico y precisión para priorizar e invertir los recursos disponibles de manera eficiente en las medidas necesarias para luchar contra el cambio climático. Por ello, en esta tesis se expone el desarrollo de un sistema de información territorial y sectorial (SITE) para monitorear las emisiones de GEI que sirva como herramienta de gobernanza climática local y regional. SITE combina las ventajas de los enfoques metodológicos descendente o top-down (de arriba hacia abajo) y ascendente o bottom-up (de abajo hacia arriba), para lograr un enfoque híbrido innovador para contabilizar y gestionar de manera eficiente las emisiones de GEI. Por tanto, en esta tesis se definen los diferentes desarrollos metodológicos, tanto generales como específicos de sectores clave del Panel Intergubernamental de Cambio Climático (IPPC) (edificación, transporte, sector forestal, etc.), un desarrollo informático para la parte de SITE que se ejecuta del lado del servidor, que de ahora en adelante denominaremos back-end del sistema, y siete implementaciones como casos de estudio representativos, a diferentes escalas y aplicados sobre diferentes sectores. Estas implementaciones a diferentes escalas y sectores demuestran el potencial del sistema como herramienta de apoyo en la toma de decisión contra el cambio climático a nivel regional y local. Las diferentes implementaciones en casos piloto representativos, tanto a nivel regional en la Comunitat Valenciana como a nivel local en municipios grandes (València) y medianos (Quart de Poblet y Llíria) muestran el potencial de adaptación territorial y sectorial que tiene la herramienta. Las metodologías desarrolladas para los sectores específicos de tráfico rodado, edificación o sector forestal, ofrecen cuantificaciones con una resolución espacial con gran capacidad de optimizar las políticas locales y regionales. Por tanto, la herramienta cuenta con un gran potencial de escalabilidad y gran capacidad de mejora continua mediante la inclusión de nuevos enfoques metodológicos, adaptación de las metodologías a la disponibilidad de datos, metodologías concretas para sectores clave y actualización a las mejores metodologías disponibles derivadas de actividades de investigación de la comunidad científica.[CA] Actualment, els responsables de prendre decisions contra el canvi climàtic no tenen eines per aconseguir inventaris d'emissions de gasos d'efecte hivernacle (GEH) amb prou cientificotècnic rigor, precisió i integritat per invertir els recursos disponibles de manera eficient en les mesures necessàries contra el canvi climàtic. Per això, en aquesta tesis se exposa el desenvolupa un sistema d'informació territorial i sectorial (SITE) per monitoritzar les emissions de GEH com a eina de governança climàtica local i regional. Aquest sistema combina els avantatges dels enfocaments metodològics descendent o top-down (de dalt a baix) i ascendent o bottom-up (de baix a dalt), per aconseguir un enfocament híbrid innovador per comptabilitzar i gestionar de manera eficient les emissions de GEH. Per tant, en aquesta tesi doctoral es descriuen els diferents desenvolupaments metodològics, tant generals com específics de sectors clau del Panel Intergovernamental contra el Canvi Climàtic (edificació, transport, forestal, etc.), un desenvolupament informàtic per al back-end del sistema i set implementacions com a casos d'estudi representatius, a diferents escales, amb els diferents enfocaments metodològics i aplicats sobre diferents sectors. Això queda descrit en sis capítols. Aquestes implementacions a diferents escales i sectors demostren el potencial del sistema com a eina de suport en la presa de decisió contra el canvi climàtic a nivell regional i local. Les diferents implementacions en casos pilot representatius, tant a nivell regional a la Comunitat Valenciana com a nivell local en municipis grans (València) i mitjans (Quart de Poblet i Llíria,) mostren el potencial d'adaptació territorial i sectorial que té l'eina. Les metodologies desenvolupades per als sectors específics de trànsit rodat, edificació i forestal, ofereixen quantificacions amb una resolució espacial amb gran capacitat d'optimitzar les polítiques locals i regionals. Per tant, l'eina compta amb un gran potencial d'escalabilitat i gran capacitat de millora contínua mitjançant la inclusió de nous enfocaments metodològics, adaptació de les metodologies a la disponibilitat de dades, metodologies concretes per a sectors clau, i actualització a les millors metodologies disponibles derivades de activitats de investigació de la comunitat científica.[EN] Currently, regional and local decision-makers lack of tools to achieve greenhouse gases (GHG) emissions inventories with enough rigor, accuracy and completeness in order to prioritize available resources efficiently against climate change. Thus, in this thesis the development of a territorial and sectoral information system (SITE) to monitor GHG emissions as a local and regional climate governance tool is exposed. This system combines the advantages of both, top-down and bottom-up approaches, to achieve an innovative hybrid approach to account and manage efficiently GHG emissions. Furthermore, this thesis defines the methodologies developed, a computer proposal for the back-end of the system and seven implementations as representative case studies at different scales (local and regional level), with the different methodological approaches and applied to different sectors. Thus, these implementations demonstrate the potential of the system as decision-making tool against climate change at the regional and local level as climate governance tool. The different implementations in representative pilot cases, both at the regional level in the Valencian Community and at the local level in large (Valencia) and medium-sized municipalities (Quart de Poblet and Llíria) demonstrate the potential for territorial and sectoral adaptation of the system developed. The methodologies developed for the specific sectors of road transport, building and forestry, offer quantifications with a spatial resolution with a great capacity to optimize local and regional policies. Therefore, the tool has a great potential for scalability and a great capacity for continuous improvement through the inclusion of new methodological approaches, adapting the methodologies to the availability of data, specific methodologies for key sectors, and updating to the best methodologies available in the scientific community.Lorenzo Sáez, E. (2022). Desarrollo de una herramienta integral de gestión de gases de efecto invernadero para la toma de decisión contra el cambio climático a nivel regional y local en la Comunitat Valenciana [Tesis doctoral]. Universitat Politècnica de València. https://doi.org/10.4995/Thesis/10251/181662TESISCompendi

    A Molecular Approach to the Diagnosis, Assessment, Monitoring and Treatment of Pulmonary Non-Tuberculous Mycobacterial Disease

    Get PDF
    Introduction: Non-Tuberculous Mycobacteria (NTM) can cause disease of the lungs and sinuses, lymph nodes, joints and central nervous system as well as disseminated infections in immunocompromised individuals. Efforts to tackle infections in NTM are hampered by a lack of reliable biomarkers for diagnosis, assessment of disease activity, and prognostication. Aims: The broad aims of this thesis are: 1. to develop molecular assays capable of quantifying the 6 most common pathogenic mycobacteria (M. abscessus, M. avium, M. intracellulare, M. malmoense, M. kansasii, M. xenopi) and calculate comparative sensitivities and specificities for each assay. 2. to assess patients’ clinical course over 12 – 18 months by performing the developed molecular assays against DNA extracted from sputum from patients with NTM infection. 3. to assess dynamic bacterial changes of the lung microbiome in patients on treatment for NTM disease and those who are treatment na ve. Methods: DNA was extracted from a total of 410 sputum samples obtained from 38 patients who were either: • commencing treatment for either M. abscessus or Mycobacterium avium complex. • considered colonised with M. abscessus or Mycobacterium avium complex (i.e. cultured NTM but were not deemed to have infection as they did not meet ATS or BTS criteria for disease). • Diagnosed with cystic fibrosis (CF) or non-CF bronchiectasis but had never cultured NTM. For the development of quantitative molecular assays, NTM hsp65 gene sequences were aligned and interrogated for areas of variability. These variable regions enabled the creation of species specific probes. In vitro sensitivity and specificity for each probe was determined by testing each probe against a panel of plasmids containing hsp65 gene inserts from different NTM species. Quantification accuracy was determined by using each assay against a mock community containing serial dilutions of target DNA. Each sample was tested with the probes targeting: M. abscessus, M. avium and M. intracellulare producing a longitudinal assessment of NTM copy number during each patient’s clinical course. In addition, a total of 64 samples from 16 patients underwent 16S rRNA gene sequencing to characterise longitudinal changes in the microbiome of both NTM disease and controls. Results: In vitro sensitivity for the custom assays were 100% and specificity ranged from 91.6% to 100%. In terms of quantification accuracy, there was no significant difference between the measured results of each assay and the expected values when performed in singleplex. The assays were able to accurately determine NTM copy number to a theoretical limit of 10 copies/μl. When used against samples derived from human sputum and using culture results as a gold standard, the sensitivity of the assay for M. abscessus was found to be 0.87 and 0.86 for MAC. The specificity of the assay for M. abscessus was 0.95 and 0.62 for MAC. The negative predictive value of the assay for M. abscessus was 0.98 and 0.95 for MAC. This resulted in an AUC of 0.92 for M. abscessus and 0.74 for MAC. Longitudinal analysis of the lung microbiome using 16SrRNA gene sequencing showed that bacterial burden initially decreases after initiation of antibiotic therapy but begins to return to normal levels over several months of antibiotic therapy. This effect is mirrored by changes in alpha diversity. The decrease in bacterial burden and loss of alpha diversity was found to be secondary to significant changes in specific genera such as Veillonella and Streptococcus. The abundance of other Proteobacteria such as Pseudomonas remain relatively constant. Conclusion: The molecular assay has shown high in vitro sensitivity and specificity for the detection and accurate quantification of the 6 most commonly pathogenic NTM species. The assays successfully identified NTM DNA from human sputum samples. A notable association between NTM copy number and the cessation of one or more antibiotics existed (i.e. when one antibiotic was stopped because of patient intolerance, NTM copy number increased, often having been unrecordable prior to this). The qPCR assays developed in this thesis provide an affordable, real time and rapid measurement of NTM burden allowing clinicians to act on problematic results sooner than currently possible. There was no significant difference between the microbiome in bronchiectasis and cystic fibrosis nor was there a significant difference between the microbiome in patients requiring treatment for NTM and those who did not. Patients receiving treatment experienced an initial decrease in bacterial burden over the first weeks of treatment followed by a gradual increase towards baseline over the next weeks to months. This change was mirrored in measures of alpha diversity. Changes in abundance and diversity were accounted for by decreases in specific bacteria whilst the abundance of other bacteria increased, occupying the microbial niche created. These bacteria (for example Pseudomonas spp) are often associated with morbidity.Open Acces

    Development and evaluation of a treatment package for men with an intellectual disability who sexually offend

    Get PDF
    Sex offending in the general population has been a focus of interest for some time due to the damaging nature of the behaviour, and the need to reduce recidivism. Theoretical and clinical advances (Finke1hor, 1986; HM Prison Service, 1996; Marshall, Anderson, & Fernandez, 1999; Serran & Marshall, 2010) in treatment for sex offenders in the general population have been extended to men with an intellectual disability at risk of sexual offending (Lindsay, 2009). The purpose of this project is to develop and evaluate the SOTSEC-ID version cftrus model. Participants are adult males from 15 different locations across England and Wales, with an intellectual disability or borderline cognitive functioning and who have committed sexual offences. A pilot study clarified assessments and procedures, and individual data over several years is presented. A qualitative study using Interpretive Phenomenological Analysis (JP A) illustrates the 'meaning making' of participants' treatment experience through six major themes. A reliability and validity study assesses the four main quantitative measures, QACSO, SAKA, SOSAS, and VESA, finding limited support for criterion validity for the SOSAS and SAKA, excellent inter-rater reli"ability for all four main measures, and good to excellent inter-rater reliability on all but the SAKA Finally, a quantitative study, in collaboration with the wider SOTSEC-ID group, uses a repeated measures design to compare the QACSO, SOSAS and SAKA across pre-group, post-group and follow. up. Significant main effects and post-hoc comparisons were in the predicted direction for all measures. A range of information on demographic, clinical and criminogenic factors including offending during treatment or follow-up are also presented. A recidivism rate of 12.3% over a year was calculated for the sample. The treatment model and collaborative framework is recommended for wider adoption
    corecore